Overview
A container app is any web or mobile application that embeds FlowX UI Flows using the FlowX renderers (Angular, React, React Native, iOS, or Android SDKs). Container apps are responsible for authenticating end users before rendering FlowX content. The container app authentication flow provides built-in support for OAuth2/OIDC authentication, custom landing pages, and session management.Key features
Authentication providers
Support for multiple OAuth2/OIDC authentication providers via Keycloak integration
Custom landing page
Configure a landing page for unauthenticated users with organization branding
Session management
Automatic token refresh, silent refresh support, and redirect URI persistence
SSO integration
Single sign-on across container apps within the same organization
How it works
The container app authentication flow handles the following:1
Organization resolution
The container app resolves the organization context using the hostname or an organization code. This determines which Keycloak realm and authentication configuration to use.
2
Authentication redirect
Unauthenticated users are redirected to the configured identity provider (Keycloak) for login. The redirect URI is persisted in local storage to restore the user’s navigation state after authentication.
3
Token management
After successful authentication, the container app manages access tokens with automatic refresh. Silent refresh keeps the session alive without requiring user interaction.
4
UI Flow rendering
Once authenticated, the container app renders FlowX UI Flows with the user’s identity and permissions.
Configuration
Authentication setup
Container apps authenticate using OAuth2/OIDC with the following configuration:Landing page
You can configure a custom landing page that appears for unauthenticated users. This page can include:- Organization branding and logo
- Login button that initiates the authentication flow
- Links to support or documentation
Container app branding
Customize colors, logo, and header appearance for the container app
Session behavior
SDK integration
Each FlowX renderer SDK handles container app authentication:- Angular
- React
- React Native
- iOS
- Android
The Angular SDK integrates with
angular-oauth2-oidc for authentication handling. Configure the OAuth2 module in your app with the Keycloak endpoints for your organization.For setup details, see the Angular SDK documentation.Related resources
IAM Configuration
Set up Keycloak realms, clients, and service accounts
UI Flows
Learn about UI Flows and how they render in container apps
FlowX SaaS Overview
Understand the FlowX SaaS deployment model
Workspaces & Access Rights
Configure workspace-level access control